Where should I plugin the Authorization in Asp.net WebAPI?
问题 As I see I have 3 possible places to plug my stuff in the pipeline 1) AuthorizationFilters 2) Action Filters 3) DelegatingHandler The most obvious one is AuthorizationFilters , where I can decorate my actions/ controllers with my custom authorization attribute . say .. MyCustomAuthorizationAttribute . Since HTTP message handlers are in the first stage in the processing pipeline. Does it make any sense to put it in there ? Authorization for me right now simply means checking a token in the